CVE-2021-33483: Onyaktech Comments Pro Project Onyaktech Comments Pro

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. The comment posting functionality allows an attacker to add an XSS payload to the JSON request that will execute when users visit the page with the comment.

Affected products

• Onyaktech Comments Pro Project Onyaktech Comments Pro: version 3.8 only

Published 2021-09-07. Last modified 2026-06-17.